PATENT 

IN THE CLAIMS 

No claims are amended in this response. 

1 . (withdrawn) A method for controlling distribution of electronic mail messages 
communicated from a sender to a receiver via a communications network, the method 
comprising the steps of: 

(a) sampling electronic mail messages received from the sender to determine a 
level of electronic mail messages having a certain characteristic; 

(b) determining a priority value for the sender as a function of the level; 

(c) identifying a processing rule for the priority value; 

(d) receiving a new electronic mail message from the sender; and 

(e) delivering the new electronic mail message the receiver in accordance with the 
processing rule. 

2. (canceled) 

3. (withdrawn) The method of claim 1 , wherein step (c) is performed by referencing a 
rule base. 

4. (withdrawn) The method of claim 1, the method further comprising the step of: 

(f) transmitting to a network device a preference for receiving messages having the 
priority value. 

5. (canceled) 
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6. (withdrawn) A method for controlling distribution of electronic mail messages 
communicated from a sender to a receiver via a communications network, the method 
comprising the steps of: 

(a) sampling electronic mail messages received from the sender to determine a 
level of electronic mail messages having a certain characteristic; 

(b) determining a priority value for the sender as a function of the level; 

(c) identifying a prescribed delay for the priority value; 

(d) receiving a new electronic mail message from the sender; and 

(e) delivering the new electronic mail message to receiver after the prescribed 
delay. 

7. (canceled) 

8. (canceled) 

9. (canceled) 

10. (canceled) 

1 1 . (canceled) 

12. (previously presented) A method for controlling distribution of network 
communications via a communications network, the method comprising: 

sampling and classifying a subset of network communications according to sender in 
order to determine, for every sender, a level of network communications 
having a certain characteristic; 
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identifying a plurality of subsequent network communications, each being intended for 
delivery to a respective recipient and each having a respective sender; 

determining a priority value for each of the plurality of subsequent network 

communications as a function of the level previously determined for the 
communication's sender; and 

causing delivery of the plurality of subsequent network communications to the 
respective recipients in an order corresponding to the respective priority 
values, wherein certain of the plurality of network communications having a 
relatively high priority value are delivered before certain of the plurality of 
network communications having a relatively low priority value. 

1 3 . (previously presented) A method for controlling distribution of network 
communications via a communications network, the method comprising: 

sampling and classifying a subset of network communications according to sender in 

order to determine, for every sender, a level of network communications 

having a certain characteristic; 
identifying a plurality of subsequent network communications, each being intended for 

delivery to a respective recipient and each having a respective sender; 
determining a priority value for each of the plurality of subsequent network 

communications as a function of the level previously determined for the 

communication's sender; and 
delaying allocation of a network connection for a subsequent network communication 

having a relatively low priority value until after allocation of the network 

connection for another subsequent network communication having a priority 

value higher than the relatively low priority value. 
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14. (previously presented) A method for controlling distribution of network 
communications via a communications network, the method comprising: 

sampling and classifying a subset of network communications according to network 
paths over which the communications travel in order to determine, for every 
network path, a level of network communications having a certain 
characteristic; 

identifying a plurality of subsequent network communications, each having a 
respective network path; 

determining a priority value for each of the plurality of subsequent network 

communications as a function of the level previously determined for its 
respective network path; and 

selectively delaying, allocation of a network connection for delivering a network 
communications having a certain path until after utilization of network 
resources no longer exceeds a predetermined threshold. 

15. (withdrawn) A method for controlling distribution of network communications via a 
communications network, the method comprising: 

identifying a plurality of network communications, each having a respective priority 
level, and a respective source address; 

referencing a list of preferred customers' e-mail domains; and 

delaying a network communication having a source address that does not correspond 
to any e-mail domain on the list until after transmission of another network 
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communication having a respective source address that does correspond to an e- 
mail domain on the list. 

16. (previously presented) A method for controlling distribution of network 
communications via a communications network, the method comprising: 

sampling network communications received from a certain sender to determine a level 
of network communications having a certain characteristic; 

determining a priority level as a function of the level; and 

assigning the priority level to subsequent network communications received from the 
certain sender. 

17. (original) The method of claim 16, wherein the characteristic comprises containing of 
a virus. 

18. (original) The method of claim 16, wherein the characteristic comprises 
undeliverability of network communication to a respective receiver. 

19. (original) The method of claim 16, wherein the characteristic comprises 
characterization of network communication as spam. 

20. (original) The method of claim 19, wherein characterization of the network 
communication as spam is determined according to a pattern matching technique. 

2 1 . (previously presented) An apparatus for controlling distribution of network 
communications via a communications network, the apparatus comprising: 
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means for identifying a respective priority for each of a plurality of network 
communications by initially sampling, and classifying according to 
communication sender, a subset of all network communications on the 
communications network to determine, for every communication sender, a level 
of network communications having a given characteristic, wherein each of the 
plurality of network communications from a communications sender is assigned 
a priority based upon the level; and 

means for allocating network connections for delivery of network communications, 
the means being configured to provide a prioritization effect whereby 
connections are allocated for delivery of the plurality of network 
communications in an order corresponding to respective priorities of the 
plurality of network communications, a network communication having a 
relatively high priority being allocated a network connection before another 
network communication having a relatively low priority. 

22. (original) The apparatus of claim 21, whereby said means for allocating network 
connections provides unnecessary delay for allocation of a network connection for a network 
communication having a relatively low priority to permit allocation of said network 
connection for delivery of a network communication having a relatively high priority. 

23. (previously presented) The apparatus of claim 22, wherein said delay is provided for 
any network communications having a certain priority. 

24. (previously presented) The apparatus of claim 22, wherein said delay is provided for 
any network communication received along a certain network path. 
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25. (previously presented) The apparatus of claim 22, wherein said delay is provided for 
any network communication originating from a certain sender. 

26. (previously presented) The apparatus of claim 22, wherein said delay is provided for 
any network communication when utilization of network resources exceeds a predetermined 
threshold. 

27. (canceled) 

28. (canceled) 

29. (canceled) 

30. (original) A network appliance for controlling distribution of network communications 
via a communications network, the network appliance comprising: 

a heuristic engine for identifying a network path for each of a plurality of network 
communications received by the network appliance, and for sampling a subset 
of the plurality of network communications, each network communication of 
the subset having a common network path; 

a scanner for scanning each network communication of the subset and for determining 
a value for a sender metric for the network communications of the subset; 

a rules database storing rules for delivering network communications, at least one of 
the rules correlating the value to a priority level; and 

a connection processor for allocating network connections for delivery of network 

communications, the connection processor being configured to allocate network 
connections for certain network communications in an order of priority 
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corresponding to the certain network communications' respective priority 
levels, wherein each network communication's respective priority level is 
assigned according to its respective network path, and the priority level assigned 
to the subset of network communications having an identical network path. 

3 1 . (original) The network appliance of claim 30, further comprising a notification 
module, the notification module being capable of communicating to another network 
appliance. 

32. (original) The network appliance of claim 30. wherein the notification module is 
configured to communicate via the communications network. 

33 . (original) The network appliance of claim 3 1 , wherein the notification module is 
configured to communicate priority level information for a corresponding network path. 

34. (original) The network appliance of claim 3 1 , wherein the notification module is 
configured to communicate a preference to delay network communications from a certain 
network path. 

35 . (original) The network appliance of claim 3 1 , wherein the notification module is 
configured to communicate a request to reduce a volume of network communications directed 
to the network appliance. 

36. (original) The network appliance of claim 30, wherein the sampling is performed 
according to a predetermined sampling rate. 

37. (original) The network appliance of claim 36, wherein the predetermined sampling 
rate is stored in the rules database. 

9 

20423/1 1856/DOCS/1701059.1 



PATENT 

38. (original) The network appliance of claim 30, wherein the sampling rate is varied over 
time. 

39. (original) The network appliance of claim 30, wherein the sender metric comprises a 
virus rate indicating a percentage of the network communications of the subset that carry a 
virus. 

40. (original) The network appliance of claim 30, wherein the sender metric comprises a 
delivery success rate indicating the percentage of the network communications of the subset 
that are delivered. 

41. (original) The network appliance of claim 30, wherein the sender metric comprises a 
spam rate indicating a percentage of the network communications of the subset that are 
determined to be unwanted. 

42. (original) The network appliance of claim 4 1 , wherein the determination of whether a 
certain network communication is unwanted is determined by content-based analysis. 

43 . (original) The network appliance of claim 4 1 , wherein the determination of whether a 
certain network communication is unwanted is determined by pattern matching. 

44. (original) The network appliance of claim 30, wherein the rules database further 
comprises a prescribed delay corresponding to the priority level. 

45. (original) The network appliance of claim 44, wherein the prescribed delay comprises 
a fixed period of time. 



10 



20423/1 1856/DOCS/1701059.1 



46. (original) The network appliance of claim 44, wherein the prescribed delay comprises 
delay until network resource availability reaches a certain level. 

47. (withdrawn) A method for controlling distribution of network communications via a 
communications network, the method comprising: 

tracking a number of inbound connections for each of a plurality of communications 
hosts; 

sending, responsive to a certain communications host accounting for a number of 

inbound connections exceeding a certain percentage of available connections, a 
request to the certain communications host to reduce its network 
communications; 

monitoring a volume of network communications from the certain communications 
host; and 

altering, responsive to the certain communications host failing to reduce a volume of 
its network communications, a connection build process for the certain 
communications host to control a flow of the certain communications host's 
network communications; 

48. (withdrawn) The method of claim 47, wherein the connection build process relates to a 
TCP connection. 

49. (withdrawn) The method of claim 47, wherein the connection build process relates to 
an SMTP connection. 

50. (withdrawn) The method of claim 47, wherein altering the connection build process 
comprises slowing the connection build process for said certain host. 
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5 1 . (withdrawn) The method of claim 47, wherein altering the connection build process 
comprises stopping the connection build process for said certain host. 

52. (previously presented) A system for controlling distribution of network 
communications via a communications network, the system comprising: 

a mail server operating within an internal communications network for distribution of 
incoming network communications received via an external communications 
network; and 

a network appliance logically positioned between the mail server and the external 

communications network, the network appliance being specially configured to 
selectively allocate network connections of the internal communications 
network for delivery of the incoming network communications to the mail 
server, the network appliance being further configured to allocate network 
connections to the incoming network communications in a prioritized manner 
determined according to an incoming network communication priority value 
corresponding to the communication's sender, wherein the priority value is 
determined based on having previously sampled and classified an initial subset 
of network communications according to sender in order to determine, for 
every sender, a level of network communications having a certain 
characteristic. 

53. (original) The method of claim 52, wherein the prioritized manner provides for 
allocation of resources to an incoming network communication that provides for delivery of 
higher priority network communications before lower priority network communications. 

54. (canceled) 
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55. (previously presented) A network appliance for controlling distribution of network 
communications via a communications network, the network appliance receiving incoming 
network communication connections, the network appliance being capable of allocating 
network connections for delivering network communications, the network appliance 
selectively allocating network connections for each of a plurality of network communications 
in order to receive a prioritization effect according to an incoming network communication 
priority value corresponding to the communication's sender, wherein the priority value is 
determined based on having previously sampled and classified an initial subset of network 
communications according to sender in order to determine, for every sender, a level of 
network communications having a certain characteristic. 

56. (original) The network appliance of claim 55, the prioritization effect comprising 
delaying allocation of a network connection for delivery of a first network communication 
having a first priority, and allocation of the network connection for delivery of a second 
network communication having a second priority higher than the first priority, allocation of 
the network connection for delivery of the second network communication being performed 
before allocation of the network communication for delivery of the first network 
communication. 

57. (original) The network appliance of claim 55, the prioritization effect comprising 
allocating a network connection for delivery of a relatively high priority network 
communication before allocating the network connection for delivery of a relatively low 
priority network communication. 
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58. (original) The network appliance of claim 55, the prioritization effect comprising 
delaying allocation of a network connection for a given path to meet predetermined 
preference criteria. 

59. (previously presented) The network appliance of claim 58, wherein the predetermined 
preference criteria provides that network communications from a certain path should not be 
delivered if utilization of network resources presently exceeds a predetermined threshold. 

60. (previously presented) The network appliance of claim 58, wherein the predetermined 
preference criteria provides that network communications from a certain sender should not be 
delivered if utilization of network resources presently exceeds a predetermined threshold. 

61 . (previously presented) The network appliance of claim 58, wherein the predetermined 
preference criteria provides that network communications having a certain priority level 
should not be delivered if utilization of network resources presently exceeds a predetermined 
threshold. 

62. (withdrawn) A method for controlling distribution of network communications from a 
sender to a receiver via a communications network, the method comprising the steps of: 

identifying a particular network communication intended for delivery to a recipient; 

identifying a priority level corresponding to the particular network communication; 

determining a prescribed delay for the identified priority level; and 

delaying delivery of the particular network communication to the intended recipient 
according to the prescribed delay, wherein delaying delivery of the particular 
network communication comprises controlling allocation of network 
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connections for delivery of some network communications to cause other 
network communications having priority levels higher than the particular 
network communication to be delivered before delivery of the particular 
network communication. 

63. (withdrawn) The method of claim 62, wherein the identifying, determining and 
delaying are performed by a network appliance capable of communicating via the 
communications network, the network appliance being logically positioned between the 
sender and the receiver. 

64. (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying a network address of a mail system of the sender from which the particular 
network communication originated. 

65. (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying a network address of a mail system of an intermediary along a network path from 
the sender to the receiver. 

66. (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying a domain name of the a mail system of the sender from which the particular 
network communication originated. 

67. (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying a domain name of a mail system of an intermediary along a network path from the 
sender to the receiver. 
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68. (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying network path information found in a header of the particular network 
communication. 

69. (withdrawn) The method of claim 68, wherein identifying the network path 
information comprises referencing TCP or IP packet headers of the particular network 
communication. 

70. (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying network path information of a mail system having previously processed the 
particular network communication. 

71 . (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying network path information of a mail system having previously routed the particular 
network communication. 

72. (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying a sender identity domain associated with the sender of the particular network 
communication. 

73. (withdrawn) The method of claim 62, wherein identifying the sender identity domain 
comprises referencing SMTP header information of the particular network communication. 

74. (withdrawn) The method of claim 62, wherein identifying the priority level comprises 
identifying a geographic origin of the particular network communication. 

75. (withdrawn) The method of claim 62, wherein the prescribed delay is established 
according to a recorded preference of the receiver. 
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76. (withdrawn) The method of claim 62, wherein the prescribed delay is established 
according to a preference of an intermediary, the intermediary being logically positioned 
between the sender and the receiver for transmitting network communications from the sender 
to the receiver. 

77. (canceled) 

78. (previously presented) A method for controlling distribution of network 
communications via a communications network, the method comprising: 

identifying a plurality of network communications, each having a respective priority 
level corresponding to the communication's sender, wherein the respective 
priority level is determined based on having previously sampled and classified 
an initial subset of network communications according to sender in order to 
determine, for every sender, a level of network communications having a 
certain characteristic; 

allocating network connections for delivery of network communications to allocate 
network connections as a function of a respective priority level of each of the 
plurality of network communications. 

79. (original) The method of claim 78, wherein said allocating comprises allocating a 
network connection to a certain network communication having a first priority level before 
allocating the network connection to another network communication having a second priority 
level lower than the first priority level. 

80. (original) The method of claim 78, wherein said allocating comprises delaying 

transmission of a certain network communication having a first priority level until after 
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transmission of another network communication having a second priority level higher than the 
first priority level. 

8 1 . (original) The method of claim 78, wherein said allocating comprises causing delivery 
of a certain network communication having a first priority level to occur after delivery of 
another network communication having a second priority level higher than the first priority 
level. 

82. (canceled) 

83. (canceled) 

84. (canceled) 

85. (canceled) 

86. (canceled) 

87. (canceled) 
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